Sr Specialist Cybersecurity - Control Testing - IT General Controls (ITGC), Cloud Security Controls, Application Security Controls, Information Security Controls, SOX Control Testing

Start free →

Or apply yourself on the official page →

About the role

Role: Sr Specialist Cybersecurity - Control Testing - ITGC / SOX Control Testing About the Job The CA (Controls Assurance) team is part of the Chief Security Office (CSO) and is responsible for testing information technology and information security controls owned and operated by AT&T Technology Services (ATS), including CSO. This Senior Specialist will work closely with control owners, control operators, technology teams, business process owners, transformation stakeholders, and technology leadership to identify gaps in control design and operating effectiveness across AT&T’s control environment. The professional in this role will independently test IT General Controls, Cloud security controls, critical application security controls, business process controls, IT-dependent manual controls, automated controls, and other technology or security controls. The ideal candidate will bring a strong combination of telecom industry experience, control design expertise, assurance and testing experience, and process / technology transformation exposure . Big 4 Manager or equivalent who has led or executed complex control testing, technology risk, SOX, ITGC / ITAC, business process controls, or technology transformation assurance engagements. Experience Level 8+ years of experience. Location Hyderabad / Bengaluru Responsibilities Include • Work with CTR leadership to understand control testing priorities and support annual test planning, risk-based prioritization, scope definition, and control testing execution. • Independently execute complex engagements from the annual testing plan or discrete risk-based reviews, including test script preparation, walkthroughs, evidence review, issue identification, stakeholder alignment, documentation, and reporting to senior ATS stakeholders. • Test IT General Controls, IT Application Controls, automated controls, IT-dependent manual controls, cloud security controls, critical application security controls, and business process controls. • Evaluate control design and operating effectiveness across technology platforms, telecom systems, applications, infrastructure, data flows, and business processes. • Partner with external auditors, internal stakeholders, technology teams, control owners, and business process owners to drive efficient testing, evidence collection, issue resolution, and audit readiness. • Provide analysis of complex technology and security control issues and clearly articulate risk to AT&T assets, including devices, networks, applications, data, customers, and business objectives. • Support reporting of test results, open issues, risk themes, control gaps, and remediation progress to leadership and relevant stakeholders. • Bring a process transformation mindset by identifying opportunities to improve control design, reduce control complexity, increase automation, and strengthen preventive and detective controls. • Support control design and assurance activities for technology and business transformation initiatives, including new platforms, cloud adoption, application modernization, telecom process changes, and digital transformation programs. • Contribute to the development and enhancement of Control Testing Methodology, Technology Risk Management Framework components, testing procedures, and related tooling. • Mentor and support junior team members by providing guidance on testing methodology, documentation standards, risk articulation, stakeholder management, and issue evaluation. • Support emerging assurance scenarios involving AI usage, agentic workflows, continuous controls monitoring, automated evidence collection, and analytics-driven control testing. Required Skills • Minimum 8 years of experience in Technology Risk Management, Consulting, Assurance, Internal Audit

View the official posting →